Local File Inclusion (LFI)

🗓️ 20 Nov 2024 03:48:10Reported by Veracode Vulnerability DatabaseType

symfony/runtime has a Local File Inclusion vulnerability due to improper argv value handling.

Reporter	Title	Published	Views	Family All 52
AstraLinux	Astra Linux – Vulnerability in symfony	11 Feb 202507:35	–	astralinux
BDU FSTEC	The vulnerability of the Symfony software platform for developing and managing web applications arises from the lack of measures taken to neutralize special elements, allowing attackers to execute arbitrary code.	14 Nov 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the http-client component of the Symfony software development and web application management platform allows attackers to access confidential data.	3 Jul 202500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the validator component in the Symfony software development and web application management platform allows a hacker to access confidential data.	3 Jul 202500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the http-foundation component of the Symfony software development and web application management platform allows attackers to access confidential data.	3 Jul 202500:00	–	bdu_fstec
Circl	CVE-2024-50340	6 Nov 202421:10	–	circl
CNNVD	Symfony 注入漏洞	6 Nov 202400:00	–	cnnvd
CVE	CVE-2024-50340	6 Nov 202421:09	–	cve
Cvelist	CVE-2024-50340 Ability to change environment from query in symfony/runtime	6 Nov 202421:09	–	cvelist
Debian	[SECURITY] [DSA 5809-1] symfony security update	11 Nov 202419:06	–	debian

Vulners

Node

runtime symfony/runtimeRangev5.3.0-BETA1–5.3.0-BETA1php

runtime symfony/runtimeRangev6.0.0-BETA1–6.0.0-BETA1php

runtime symfony/runtimeRangev7.0.0-BETA1–7.0.0-BETA1php

symfony symfony/symfonyRangev5.3.0-BETA1–5.3.0-BETA1php

symfony symfony/symfonyRangev6.0.0-BETA1–6.0.0-BETA1php

symfony symfony/symfonyRangev7.0.0-BETA1–7.0.0-BETA1php

Source	Link
github	www.github.com/symfony/symfony/commit/a77b308c3f179ed7c8a8bc295f82b2d6ee3493fa
symfony	www.symfony.com/blog/cve-2024-50340-ability-to-change-environment-from-query
github	www.github.com/advisories/GHSA-x8vp-gf4q-mw5j
github	www.github.com/FriendsOfPHP/security-advisories/blob/master/symfony/symfony/CVE-2024-50340.yaml
github	www.github.com/FriendsOfPHP/security-advisories/blob/master/symfony/runtime/CVE-2024-50340.yaml

21 Nov 2024 13:04Current

6.6Medium risk

Vulners AI Score6.6

CVSS 3.17.3

EPSS0.63422

SSVC